Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/FFOfBBzczn5a3TF4MRSIiashEm8.roa
File: FFOfBBzczn5a3TF4MRSIiashEm8.roa (raw, json)
Hash identifier: OmaRDi0wLwBXrRz+6ERWP+qZPwwQ/DNKs1jwb6NZkbs=
Subject key identifier: 14:53:9F:04:1C:DC:CE:7E:5A:DD:31:78:31:14:88:89:AB:21:12:6F
Certificate issuer: /CN=47119a205683167925b9f04174312637b1600c07
Certificate serial: 089D3865
Authority key identifier: 47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/FFOfBBzczn5a3TF4MRSIiashEm8.roa
Signing time: Sat 01 Jan 2022 07:55:45 +0000
ROA not before: Sat 01 Jan 2022 07:55:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15600
IP address blocks: 185.74.124.0/22 maxlen: 24
5.144.0.0/19 maxlen: 24
2a00:d4a0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 144521317 (0x89d3865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47119a205683167925b9f04174312637b1600c07
Validity
Not Before: Jan 1 07:55:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14539f041cdcce7e5add317831148889ab21126f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:57:b4:02:53:7e:2d:bb:ab:2a:42:4d:a0:
7c:72:d5:56:95:b2:17:df:7b:70:e4:93:f4:20:94:
3f:3f:fd:ee:0d:ca:9e:4e:eb:ae:d3:fb:61:fd:f2:
cd:29:e3:9d:d1:79:f5:ea:fe:63:ff:da:24:86:73:
1b:25:16:f6:cb:08:64:eb:c6:6b:b5:21:46:9d:eb:
94:4e:ce:02:bc:b0:44:19:47:1c:a6:3c:d0:24:0d:
f4:94:87:1f:4f:27:20:79:ea:23:23:97:82:42:b1:
72:e9:2d:b8:ee:7c:20:22:05:cc:7f:57:b3:df:3a:
7d:33:f9:6a:39:3a:be:c3:20:52:86:51:c0:99:b1:
bf:07:00:ce:81:03:53:5c:b6:5e:7b:b3:69:ae:0c:
c1:48:81:77:16:68:3f:7f:40:54:be:87:86:dd:89:
67:3d:87:ea:49:00:b7:67:8e:21:ab:51:ad:72:4c:
c5:ab:e5:e5:4f:41:07:69:c7:29:4f:a7:bb:d7:4a:
bb:19:ec:97:55:98:82:11:88:a4:ec:0f:52:f8:14:
1a:c4:db:95:00:61:06:15:78:c3:4c:51:5f:ab:f4:
4b:a9:8e:59:a5:e4:68:3c:d3:7c:21:28:9f:c8:d4:
cf:e4:8f:e7:64:a7:ce:02:ae:7f:cd:b7:76:13:ba:
32:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:53:9F:04:1C:DC:CE:7E:5A:DD:31:78:31:14:88:89:AB:21:12:6F
X509v3 Authority Key Identifier:
keyid:47:11:9A:20:56:83:16:79:25:B9:F0:41:74:31:26:37:B1:60:0C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxGaIFaDFnklufBBdDEmN7FgDAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/FFOfBBzczn5a3TF4MRSIiashEm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ab36a0-04ec-4190-b59d-2a0e45862c03/1/RxGaIFaDFnklufBBdDEmN7FgDAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.0.0/19
185.74.124.0/22
IPv6:
2a00:d4a0::/29
Signature Algorithm: sha256WithRSAEncryption
74:59:35:c0:61:49:0e:7a:84:01:62:79:96:69:60:97:17:e6:
ce:3e:15:e7:78:03:09:b9:0f:18:3e:1c:58:4d:f8:0c:98:ce:
96:e3:c0:2f:a8:ff:75:7b:f9:13:33:29:31:e7:2f:e6:a3:df:
b2:4e:b3:45:78:ad:bf:47:bc:14:78:62:d8:62:fb:98:5f:a2:
4a:27:95:3d:14:81:3c:1d:7c:71:22:5a:19:82:4c:6f:5a:b1:
4d:29:67:31:a1:4b:c8:8e:2b:d9:38:6f:92:5e:c3:b3:09:01:
ee:53:55:db:d5:cf:77:34:07:0d:26:ca:af:87:e8:bd:5a:0b:
34:1c:c7:0c:ee:82:2e:28:a4:a8:96:86:92:6f:fe:31:4d:db:
32:03:56:3a:09:b2:0b:38:ce:0e:b3:f5:bb:3c:f8:c3:50:73:
24:03:3f:9e:15:6c:70:cf:33:7e:07:9c:bd:78:a5:69:c6:08:
7d:57:22:fb:12:1a:fb:28:46:e2:25:fa:c0:5b:aa:fd:03:d2:
f3:b5:94:69:08:ef:81:cc:41:40:97:cc:5c:52:8e:99:b3:f1:
a9:cc:92:38:b6:eb:22:e2:59:3a:66:51:a3:94:52:1e:08:88:
d9:dc:e6:0e:72:d8:53:b3:25:88:bd:48:40:d4:ca:52:24:58:
fd:1c:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:06 2024 by rpki-client on console-fra.rpki-client.org